This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: E1bsQJPb+l/4vBI1JJ/+xuv8rJewNgavmD8Ur8MDRb8= Subject key identifier: 59:41:C6:7A:C5:AE:53:47:9F:03:3A:72:4C:A5:42:D1:CC:02:F2:95 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 0F6F45A8489D0524C3802F870BF718D7F860B056 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 01AF Signing time: Sun 25 Jan 2026 02:52:14 +0000 Manifest this update: Sun 25 Jan 2026 02:47:14 +0000 Manifest next update: Wed 28 Jan 2026 06:07:14 +0000 Files and hashes: 1: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: /E0WcCB564rrfSDJXgpYWJcXmcRB8NDZ/FiPUA74WOU=) 2: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) 4: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6f:45:a8:48:9d:05:24:c3:80:2f:87:0b:f7:18:d7:f8:60:b0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Jan 25 02:47:14 2026 GMT Not After : Jan 28 06:07:14 2026 GMT Subject: CN=5941C67AC5AE53479F033A724CA542D1CC02F295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:35:59:6f:4e:af:a9:7e:14:74:a1:d0:a1: 84:b5:90:98:da:cd:ce:26:fd:3e:ed:5e:31:2c:17: c7:5f:7d:9f:5e:59:e1:5c:a9:3a:80:9e:d8:39:5d: 5e:2c:a9:28:e4:a2:3f:58:0d:99:6b:29:bd:8c:7c: 26:97:c3:73:5b:8d:96:f0:bb:85:da:62:b0:71:77: 32:20:91:57:c6:82:8f:74:e2:4d:f8:aa:ee:94:47: c7:75:1c:fb:dc:14:aa:86:3f:a6:00:e0:b6:d6:94: 91:9e:c6:88:e7:e0:fb:0e:9e:20:16:28:bc:6b:e0: 91:bf:6f:5d:f8:b7:69:b7:0e:47:ed:d0:f7:22:51: c4:13:15:5d:28:d9:8a:19:4b:40:4a:ea:f8:5b:a7: f7:05:38:74:9a:e9:28:ea:4d:42:fe:43:01:8d:c8: e3:6f:5a:9b:e6:8c:9c:b9:a3:d7:9b:1e:87:15:44: fa:e5:e4:ef:ec:20:fd:f2:61:11:3c:04:f8:31:1f: 3a:ff:6f:62:b8:51:e7:6c:fc:88:7b:5a:4f:af:93: 1c:fd:d3:52:f2:1e:e7:bf:98:4f:84:d5:fc:d7:55: 3f:27:7a:a3:f6:43:cb:12:76:ec:ff:6c:5e:39:cf: 5c:58:1c:72:a2:b2:1b:b2:90:7f:d0:ed:9b:f9:05: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:41:C6:7A:C5:AE:53:47:9F:03:3A:72:4C:A5:42:D1:CC:02:F2:95 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:88:94:d1:4b:ed:a1:8f:c1:29:63:b8:cc:dd:85:a3:17:84: 59:58:30:f7:a0:f0:d0:b2:5e:8b:0a:0b:b6:35:28:78:58:c5: 72:0d:f4:b9:f2:57:4d:2d:d0:a0:ef:68:dd:5a:ba:ff:d9:2d: 53:fb:93:03:6e:38:fe:45:49:73:27:ff:4e:c7:d0:01:b5:72: cc:66:ff:23:61:f0:16:40:03:2c:c9:bc:88:c8:1f:f1:5e:3d: cd:29:f6:57:7c:b0:0f:ef:2a:f5:6b:8c:cb:b7:f1:f1:82:f9: 3e:5a:9e:2a:73:fd:4e:19:c2:f0:0c:6e:62:f5:cb:70:ab:a5: 30:87:87:c7:68:ba:8c:97:22:e1:13:e1:c2:fc:17:2d:10:37: 72:36:ea:5a:96:a8:c8:67:9e:ab:4c:a6:d2:e0:c9:ef:92:b1: 54:8e:0f:80:85:e4:be:3c:96:cf:33:5a:a3:e1:dd:86:4a:dc: fa:d9:98:52:df:d2:49:a9:58:f5:75:fd:e9:28:33:0e:51:a8: 43:cc:ff:d1:bd:44:8a:16:50:c5:91:62:e8:02:ca:de:75:66: 6b:f5:cd:74:12:77:a7:c7:e4:1b:6b:2f:17:44:5d:84:06:23: b4:7b:d3:ee:42:60:87:c5:c3:17:21:51:f3:0e:7a:a2:51:54: da:91:fc:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD29FqEidBSTDgC+HC/cY1/hgsFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNjAxMjUwMjQ3MTRaFw0yNjAxMjgwNjA3MTRaMDMxMTAvBgNV BAMTKDU5NDFDNjdBQzVBRTUzNDc5RjAzM0E3MjRDQTU0MkQxQ0MwMkYyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KDVZb06vqX4UdKHQoYS1kJja zc4m/T7tXjEsF8dffZ9eWeFcqTqAntg5XV4sqSjkoj9YDZlrKb2MfCaXw3NbjZbw u4XaYrBxdzIgkVfGgo904k34qu6UR8d1HPvcFKqGP6YA4LbWlJGexojn4PsOniAW KLxr4JG/b134t2m3Dkft0PciUcQTFV0o2YoZS0BK6vhbp/cFOHSa6SjqTUL+QwGN yONvWpvmjJy5o9ebHocVRPrl5O/sIP3yYRE8BPgxHzr/b2K4Ueds/Ih7Wk+vkxz9 01LyHue/mE+E1fzXVT8neqP2Q8sSduz/bF45z1xYHHKishuykH/Q7Zv5BcmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWUHGesWuU0efAzpyTKVC0cwC8pUwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKIlNFL7aGPwSljuMzdhaMXhFlYMPeg8NCy XosKC7Y1KHhYxXIN9LnyV00t0KDvaN1auv/ZLVP7kwNuOP5FSXMn/07H0AG1csxm /yNh8BZAAyzJvIjIH/FePc0p9ld8sA/vKvVrjMu38fGC+T5anipz/U4ZwvAMbmL1 y3CrpTCHh8douoyXIuET4cL8Fy0QN3I26lqWqMhnnqtMptLgye+SsVSOD4CF5L48 ls8zWqPh3YZK3PrZmFLf0kmpWPV1/ekoMw5RqEPM/9G9RIoWUMWRYugCyt51Zmv1 zXQSd6fH5BtrLxdEXYQGI7R70+5CYIfFwxchUfMOeqJRVNqR/N8= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:51 2026 by rpki-client